Legal

Privacy Policy

Effective Date: 1 July 2025 | Last Updated: 23 October 2026

1. Who We Are

Biashara Smart is developed and operated by Ukweli Code Solutions. References to "we", "us", or "our" refer to Ukweli Code Solutions as the service provider. Our platform is hosted at ukwelicode.com/biashara.

2. Information We Collect

Category	Examples	Purpose
Account data	Business name, email, phone number	Authentication, tenant provisioning
Business data	Invoices, inventory, transactions, staff records	Core service functionality
Device / Technical data	App version, OS, sync timestamps	Service reliability and debugging
Payment identifiers	M-Pesa transaction references, Paystack IDs	Payment reconciliation

We do not collect payment card numbers, PINs, or banking credentials directly. These are handled exclusively by the respective third-party payment gateways.

3. How We Use Your Information

To provide, maintain, and improve the Service;
To authenticate users and manage multi-tenant data isolation;
To process and reconcile payments initiated through the Service;
To synchronise offline data between devices and our servers;
To send service-related notifications (not marketing without consent);
To comply with applicable legal obligations.

4. Data Storage & Security

Your business data is stored on servers hosted by LiteSpeed / cPanel-based infrastructure at ukwelicode.com. We implement industry-standard security measures including HTTPS/TLS encryption in transit, hashed credentials, and per-tenant data isolation at the database level.

No security system is impenetrable. We cannot guarantee absolute security of data transmitted over the internet or stored on our servers. You should maintain your own backups of critical business data.

5. Data Sharing

We do not sell, rent, or trade your personal or business data. We may share data only in the following limited circumstances:

Payment processors: Transaction data is shared with M-Pesa (Safaricom), Paystack, or Stripe solely to complete payment requests you initiate.
Legal obligation: Where required by applicable law, court order, or governmental authority.
Business transfer: In the event of a merger, acquisition, or sale of assets, with appropriate notice to you.

6. Data Retention

We retain your data for as long as your account remains active or as required by applicable law. Upon account deletion, we will delete or anonymise your data within 90 days, except where retention is required for legal or regulatory compliance.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you;
Request correction of inaccurate data;
Request deletion of your data ("right to be forgotten");
Object to or restrict certain processing;
Data portability.

To exercise any of these rights, contact us at legal@ukwelicode.com. We will respond within 30 days.

8. Cookies

Our web interface uses session cookies solely for authentication. We do not use tracking, advertising, or analytics cookies. The mobile application does not use browser cookies.

9. Children's Privacy

The Service is intended for business use by adults. We do not knowingly collect data from persons under the age of 18. If you believe a minor has provided data through the Service, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the application or email. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

11. Contact

For privacy-related enquiries: legal@ukwelicode.com
Ukweli Code Solutions, Nairobi, Kenya.